Download Communication Systems 11th lecture - uni

Communication
Systems
12th lecture
Chair of Communication Systems
Department of Applied Sciences
University of Freiburg
2006
1 | 53
Communication Systems
Last lecture – GSM data services, GPRS
●
●
Standardization of GPRS was important cornerstone for the
development of UMTS network
–
GPRS defines an add-on for data services within the GSM
networks - packet orientated approach to data switching
–
Allocation of channels request-driven
–
Todays bandwidth of 53,6 kbit/s (4 full rate traffic channels à
13,4 kbit/s), up to 107,2 kbit/s with 8 channels
–
GPRS usually operates asynchronous with more bandwidth
for down than for upstream
GPRS bases on an additional infrastructure: GSN – GPRS
Support Nodes as an extension to GSM
–
SGSN (Serving GSN), GGSN (Gateway GSN)
2 | 53
Communication Systems
Last lecture – GSM data services, GPRS
●
Main GSM components, like MSC, VLR and HLR used for
GPRS too, additional infrastructure: GSN – GPRS Support
Nodes
3 | 53
Communication Systems
Last lecture – GSM, logical structure of the network
●
●
●
●
SGSN – serving GSN to support the MSC for localization,
billing and security
GGSN – gateway GSN is the gateway to the packet data
network – usually the Internet
GR – GPRS register to support the HLR (home location
register), used for user address mapping
Several new interface definition between network
components
4 | 53
Communication Systems
Plan for this lecture
●
UMTS as the world wide 3G mobile standard
–
Short history of developments, todays and future revisions
–
Network architecture and interfaces
–
User equipment and USIM
–
Core network functionality and protocols (packet switched and
circuit switched domain)
–
UTRAN – UTMS radio network subsystem
●
RNS, RNC, Node B
–
Network based and connection based functions
–
Power control and hand-over
–
Athentication and security
5 | 53
Communication Systems
UMTS – history and planned standards
●
Requirements toward a 3G standard
–
Fully specified and world-widely valid
–
Major interfaces should be standardized and open
●
Services must be independent from radio access technology
and is not limited by the network infrastructure
Support of multimedia and all of its components
●
Convergence of existing networks
●
6 | 53
Communication Systems
UMTS – history and planned standards
●
Definition of GPRS (specific GPRS network elements are
reused in 3G specification)
–
Reuse of operation and management components of GSM
–
Reuse of packetized data services infrastructure of GPRS
7 | 53
Communication Systems
UMTS – history and planned standards
●
●
●
●
●
February 1995 UMTS Task Force established; "The Road
to UMTS" report
December 1996 The UMTS Forum established. "European"
WCDMA standard known as Universal Mobile
Telecommunications System (UMTS)
June 1997 UMTS Forum produces first report: "A
regulatory Framework for UMTS"
October 1997 ERC decided on UMTS core band.
January 1998 ETSI meeting: W-CDMA and TD-CDMA
proposals combined to UMTS air interface specification
8 | 53
Communication Systems
UMTS – history and planned standards
●
●
June 1998 Terrestrial air interface proposals (UTRAN,
WCDMA(s), CDMA2000(s), EDGE, EP-DECT, TD-SCDMA)
were handed into ITU-R
3GPP Release ‘99
9 | 53
Communication Systems
UMTS – history and planned standards
●
●
December 1999 in Nice ETSI Standardisation finished for
UMTS Release 1999 specifications both for FDD and TDD
March 2001 in Palm Springs 3GPP approves UMTS
Release 4 specification
10 | 53
Communication Systems
UMTS – history and planned standards
●
Release 4 and 5 specifies an “All IP standard”
–
Streaming services (fast handover)
–
Seamless UMTS/WLAN integration, interworking
–
Push-to-Talk over cellular
–
Presence for chat, instant messaging, ...
11 | 53
Communication Systems
UMTS – history and planned standards
●
Release 6
–
Extended location based services (LBS), with built in
anonymization
–
Packet switches streaming services, with adaptation to
availabe network resources (GERAN/GPRS, UTMS, WLAN)
–
Of course :-) DRM
–
Charging Management Framework (for extended payment
systems)
–
For more see www.3gpp.org
12 | 53
Communication Systems
UMTS network architecture and interfaces
●
●
●
UTMS network architecture has several similarities to GSM,
but you will find different names for some components
As for GSM in UMTS several interfaces are defined
UE – user equipment means more generally any UMTS
enabled (mobile) device
13 | 53
Communication Systems
UMTS network domains
●
●
●
User Equipment Domain handles the access of the user
onto the UMTS services
USIM – User Services Identity Module
–
Extended SIM functionality
–
Functions for user identification, authentication and encryption
–
Integrated into SIM card (of the established format)
–
Most recent Mobile Equipment can handle both SIM and USIM
Mobile Equipment Domain responsible for air interface
–
User interface for end-to-end connections
14 | 53
Communication Systems
UMTS network domains - CN
●
●
Infrastructure Domain
–
Shared between all users
–
Offers services to all authenticated users
CN – Core Network the (mobile) telephony backend
infrastructure
–
Functions which are independent on access network
–
Handover between different systems
–
Location management if there is no dedicated link between
UE and UTRAN
–
Inter-connection of different bearer networks
15 | 53
Communication Systems
UMTS network architecture – Core Network, UTRAN, UE
16 | 53
Communication Systems
UMTS network domains - CN
●
CN infrastructure consists of
–
Serving network domain – network which actually provides the
user access
–
Home network domain – functionality and information which is
independent of actual user location
–
Transit network domain – infrastructure between several
network components, different kind of networks and different
network providers, operators
17 | 53
Communication Systems
UMTS network domains - CN
●
CN infrastructure split into two logical networks
–
Both may serve the two different radio networks via either
BSC and RNS
–
Circuit switched domain (CSD)
●
IuCS interface
●
Traditional circuit switched data connection and signaling
●
Resource reservation on connection setup
●
GSM components (MSC, GMSC, HLR, VLR, EIR, ...)
18 | 53
Communication Systems
UMTS network domains - CN
–
Packet switched domain (PSD)
●
IuPS interface
●
Packet orientated services
●
GPRS components (SGSN, GGSN)
19 | 53
Communication Systems
UMTS network – packet switching domain
●
The UTMS packet switching domain protocol stack follows
the GPRS design
20 | 53
Communication Systems
UMTS network - UTRAN
●
●
UTRAN (UTRA network) is the UMTS transceiver radio
interface network part
–
Manages mobility on cell level – handover decision
–
Composed of several Radio Network Subsystems (RNS)
connected to the Core Network through the lu interface
Every Radio Network Subsystem is managed by Radio
Network Controller (RNC)
–
●
RNC also handles radio resource management (RRM)
operations
RNC is responsible for the local handover process and the
combining/multicasting functions related to macro diversity
between different Node-Bs (Drift RNC - DRNC)
21 | 53
Communication Systems
UTRAN - RNS
●
●
RNSs can be
directly
interconnected
through the lur
interface
(interconnection of
the RNCs)
Node B may
contain a single
BTS or more than
one (typically 3)
controlled by a site
controller
22 | 53
Communication Systems
UMTS network - UTRAN
●
UTRAN functions
–
Controls cell capacity and interference in order to provide an
optimal utilization of the wireless interface resources
–
Includes Algorithms for Power Control, Handover, Packet
Scheduling, Call Admission Control and Load Control
–
Encryption of the radio channel
–
Congestion control to handle situations of network overload
–
System information broadcasting
–
Micro and macro diversity (explained later)
23 | 53
Communication Systems
UMTS network - UTRAN
●
Network based functions
–
Packet Scheduling
–
Controls the UMTS packet access
● Handles all non real time traffic, (packet data users)
● Decides when a packet transmission is initiated and the bit
rate to be used
Load Control
●
●
–
Ensures system stability and that the network does not
enter an overload state
Admission control to avoid network overload
●
Decides whether or not a call is allowed to generate traffic
in the network
24 | 53
Communication Systems
UTRAN network function – Load Control
–
Power Control
25 | 53
Communication Systems
UMTS network - UTRAN
●
Connection based functions
–
–
Power Control
● Manages radio link quality - Uplink is handled per
mobile (UE), downlink per physical channel
● Ensures that transmission powers are kept at a
minimum level and that there is adequate signal
quality and level at the receiving end
Handover
● guarantees user mobility in a mobile
communications network
● SRNS (Serving RNS) relocation
26 | 53
Communication Systems
UTRAN - connection based functions
●
●
●
Power Control handles
–
Setting of transmit power to keep QoS in required limits
(regarding data rate, delay, BER, ...)
–
Path loss (near-far problem), shadowing (log-normal fading)
–
Fast fading (Rayleigh-, Rican-Fading)
–
Environment (delay spread, UE speed) which implies different
performance of the de-interleaver and decoder
Three types: Inner loop, outer loop (SIR-target adjusting),
open loop (power allocation)
Open-Loop Power Control
–
Rough estimation of path loss from receiving signal
–
Initial power setting, or when no feedback channel exist
27 | 53
Communication Systems
UTRAN - connection based functions
●
●
Closed-Loop Power Control
–
Feedback loop with 1.5kHz cycle
to adjust uplink / downlink power
to its minimum
–
Even faster than the speed of
Rayleigh fading for moderate
mobile speeds
Outer Loop Power Control
–
Adjust the target SIR (Signal to
Interference Ratio) setpoint in
base station according to the
target BER, commanded by RNC
28 | 53
Communication Systems
UTRAN - connection based functions
●
UMTS provides several handover procedures
–
–
–
–
–
–
●
Intra Node B handover (softer)
Inter Node B handover, inter-frequency, intra-frequency (hard
and soft)
Inter RNC (hard, soft and soft-softer)
Inter MSC
Inter SGSN
Inter System (UMTS - GSM)
Hard Handover
–
Connection to a Node B is destroyed before a new one (to an
other Node B is started)
29 | 53
Communication Systems
UTRAN - connection based functions
●
Soft Handover
–
–
–
–
A MS is in the overlapping coverage of 2 different base
stations (Node B)
Concurrent communication via 2 air interface channels
Downlink: Maximal combining with rake receiver
Uplink: Routed to RNC for selection combining, according to a
frame reliability indicator by the base station
30 | 53
Communication Systems
UTRAN - connection based functions
●
Softer Handover
–
–
–
●
Soft Softer Handover
–
●
A MS is in the overlapping coverage of 2 sectors of a base
station
Concurrent communication via 2 air interface channels
2 channels are maximally combined with rake receiver
Soft and softer handover combined
Inter system handover from UMTS to GSM or vice versa
–
–
RNS the UE is connected to is the Serving RNS
RNS which provides additional resources, e.g for handover
procedure is Drift RNS
31 | 53
Communication Systems
UTRAN - connection based functions
●
Network crossing handovers
–
End-to-end connection
between UE and CN is
handled over the Iu interface
of the SRNS (Serving Radio
Network Subsystem)
–
Exchange of SRNS will lead
to change of Iu
–
Initiated by SRNS
–
Handled by RNC and CN
32 | 53
Communication Systems
UTRAN – Base Stations (Node B) – Radio Interface
●
Base Station – Node B
–
Main task of node B is to establish the physical
implementation of the Uu interface (communication with the
UE) and the implementation of Iub interface (Communication
with the RNC)
–
Providing the Uu interface means that the Base Station
implements WCDMA radio access Physical Channels and
transfer information from Transport Channels to the Physical
Channels based on arrangements determined by the RNC
–
The term Physical Channels means different kinds of
bandwidth allocated for different purposes over Uu interface
33 | 53
Communication Systems
UMTS - Air Interface
●
●
●
●
UTMS uses Wideband CDMA (Code Division Multiple
Access) on two different duplex mechanisms
CDMA allows frequency reuse factor of 1 (GSM 4 ... 18)
–
5MHz Bandwidth allows multipath diversity using „Rake
Receiver“
–
Variable Spreading Factor (VSF) to offer Bandwidth on
Demand (BoD) up to 2MHz
–
Fast (1.5kHz) Power Control for Optimal Interference
Reduction
Services multiplexing with different QoS
Real-time / Best-effort
–
10% Frame Error Rate to 10-6 Bit Error Rate
34 | 53
Communication Systems
UMTS – QoS classes
Traffic class
Conversational
class
Streaming
class
Interactive
class
Background
Fundamental
characteristics
Preserve time
relation between
information
entities of the
stream
Preserve time
relation between
information
entities of the
stream
Request
response
pattern
Destination is
not expecting
the data within
a certain time
Preserve data
integrity
Conversational
pattern (stringent
and low delay)
Example of the
application
Voice,
videotelephony,
video games
Streaming
multimedia
Web browsing,
network games
Preserve data
integrity
Background
download of
emails
35 | 53
Communication Systems
UMTS – Rake Receiver
●
Radio receiver designed to counter the effects of multipath
fading
–
rake receiver is so named because of its analogous function to
a garden rake, each finger collecting bit or symbol energy
similarly to how tines on a rake collect leaves
–
Commonly used in a wide variety of CDMA and W-CDMA
radio devices
36 | 53
Communication Systems
UMTS – Rake Receiver
●
●
Radio receiver
–
Uses several "sub-receivers" each delayed slightly in order to
tune in to the individual multipath components
–
Each component decoded independently, but at a later stage
combined in order to make the most use of the different
transmission characteristics of each path
–
Results in higher Signal-to-noise ratio (or Eb/No) in a
multipath environment than in a "clean" environment
–
Multipath fading is a common problem in wireless networks
especially in metropoletan areas
Another “trick” to increase connection quality and reliability
is macro diversity
37 | 53
Communication Systems
UMTS – Macro Diversity
●
●
●
●
Same data stream is sent
over different physical
channels
Uplink – UE sends its data
to different Node B
Data stream is
reassembled,
reconstructed in Node B,
SRNC or NC
Downlink – receiving same
data from different cells on
different spread codes
38 | 53
Communication Systems
UMTS - Air Interface
●
UMTS FDD (Frequency Division Duplex)
–
Uplink: 1920 - 1975 MHz
–
Downlink: 2110 - 2165 MHz
–
190 MHz duplex distance
–
ca. 5MHz (variable) carrier spacing (DS CDMA – Direct
Sequence CDMA)
–
12 bands in uplink & downlink
39 | 53
Communication Systems
UMTS - Air Interface
●
●
UMTS TDD (Time Division Duplex)
Uplink & Downlink: 1900 - 1920 MHz and 2020 - 2025 MHz
–
5 carriers in total, 15 timeslots per frame
–
a user may use one or several timeslots
–
a timeslot can be assigned to either uplink or downlink
40 | 53
Communication Systems
UMTS – Cell Breathing
●
Advantages of UMTS W-CDMA
–
●
Soft capacity, dynamic cell sizes
–
●
Power Control - solves the near-far problem
Different to GSM, where
●
fixed cell size
●
Number of logged in users has no influence on cell size
In UMTS cell size is tightly interrelated with its capacity
–
Size depends on signal/noise ratio because of both maximum
Tx power and number of active users (interference in the
same cell through other users and with other cells) which
results in cell breathing
41 | 53
Communication Systems
UMTS – Cell Breathing
●
Interference increases noise in signal
–
UE on the cell edge is transmitting with max power
–
Another UE becomes active – results in increased interference
–
The received signal from the UE on the cell edge is too weak
and communication becomes impossible
–
Restriction of participants needed
–
Effective cell size decreases with increasing number of users
–
There is a trade-off between capacity and coverage
–
Results in cell breathing and imposes greater dificulties on
network planning
42 | 53
Communication Systems
Differences and similarities of GSM and UMTS
43 | 53
Communication Systems
Differences and similarities of GSM and UMTS
44 | 53
Communication Systems
UMTS – security and authentication
●
●
Security in GSM is weak by our todays standards, mostly
broken and only one way (client-to-network auth)
Authentication in UMTS
–
Basis is a common secret key K, which is only known by the
USIM (User Services Identity Module) in the UE and by the
HLR/AuC of the provider
–
The VLR or SGSN which should authenticate the user
requests from the HLR/AuC 1..n AV(Auth Vectors)
–
Each AV is a 5-tupel consisting of
●
●
RAND (random challenge) and XRES (expected response) for
the user authentication
CK (cipher key) for protection of confidentiality, IK (integrity key)
for protection of integrity, AUTN (auth token) for network
authentication
45 | 53
Communication Systems
UMTS – security and authentication
46 | 53
Communication Systems
UMTS – security and authentication
●
–
RAND and AUTN are sent to the UE/USIM, which checks
AUTN and computes the response RES to the challenge
RAND
–
RES is sent to the VLR/SGSN which compares it to XRES
Integrity and confidentiality
–
By request of MSC/VLR or SGSN the communication can be
encrypted with CK or IK between UE and RNC
–
Encryption takes place on the RLC layer and prevents forgery
of data and encryption
47 | 53
Communication Systems
UMTS – security and authentication
●
●
Functions for authentication and key agreement (AKA)
–
f1: computation of MAC (Message Auth. Code)
–
f2: computation of MAC, probably shortened
–
f3, f4, f5: computation of a key from a random number
–
 XOR, || concatenation
Generation of AV (within HLR/AuC)
–
Generation of random Sequence Number (SEQ, once at the
beginning)
–
Generation of random challenge RAND (per AV)
–
AMF (Authentication Key Management Field) to distinguish
several different algorithms
48 | 53
Communication Systems
UMTS – security and authentication
●
Computation of the several values (within HLR/AuC)
–
MAC=f1 (SQN || RAND || AMF)
–
XRES=f2 (RAND)
–
CK=f3 (RAND)
–
IK=f4 (RAND)
–
AK=f5 (RAND) , anonymity key to anonymize SQN
–
AUTN= ((SQN  AK) || AMF || MAC)
–
AV= (RAND || XRES || CK || IK || AUTN)
49 | 53
Communication Systems
UMTS – security and authentication
●
Computation of the several values (within USIM)
–
Reception of RAND and AUTN from VLR or SGSN
–
AK=f5 (RAND)
–
SQN=(SQN  AK)  AK
–
XMAC=f1 (SQN || RAND || AMF) (eXpected MAC)
–
Comparison of XMAC and MAC (from AUTN)
●
If this procedure fails the authentication of network does
not succeed and the UE sees the cell as forbidden
–
Check if sequence number is from the expected range
–
RES=f2 (RAND)
50 | 53
Communication Systems
UMTS – security and authentication
●
●
Computation of the several values (within USIM, cont.)
–
Send response to VLR or SGSN with RES
–
CK=f3 (RAND
–
IK=f4 (RAND)
–
IK, CK used for RLC encryption
Operation within VLR or SGSN
–
Reception of RES from the USIM
–
Comparison of RES with XRES (eXpected RES, from AV sent
by HLR/AuC)
●
If not equal user authentication failed
51 | 53
Communication Systems
UMTS – some aspects left ...
●
●
Explanation of the Code Division Multiple Access
–
“Chips” instead of combined TDM, FDM
–
TDD and FDD frame structure
–
...
Then: Switch over to other wireless technology for packet
networks / IP, like
–
WLAN, Bluetooth, ...
52 | 53
Communication Systems
UMTS literature
●
German text books:
– Jochen Schiller, Mobilkommunikation
–
●
Bernhard Walke, Mobilfunknetze und ihre Protokolle,
Grundlagen GSM, UMTS, ...
Link:
–
http://www.ks.uni-freiburg.de/download/papers/telsemWS05/UMTSnextGeneration/UMTS-Seminararbeit-Stefan%20Nagy.pdf
53 | 53